Unita Turism Holding S.A.
€5,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
9 settembre 2025
Autorità
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
RO
Settore
Employment
Paese
RO
Legge
GDPRStato
FINALDescrizione
The Romanian DPA has imposed a fine of EUR 5,000 on Unita Turism Holding S.A. The controller did not implement adequate technical and organisational measures to ensure cybersecurity, resulting in a successful cyberattack.
Citazioni legali
Art. 32 (1)
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security